82% of NSW public schools run Facebook pages exposed to AI image scraping

EdTech platforms have promised streamlined school-family communication, but NSW findings show that 82 per cent of public schools maintain public Facebook pages without safeguards against mass AI image harvesting. For product and policy leaders in education technology, this is a data governance and child-safety design failure, not just a school public relations problem. The $20 AI tool experiment establishes a reproducible threat baseline that every K-12 communication vendor should address.

On 15 August 2026, reporting by The Sydney Morning Herald and Brisbane Times revealed that parents in New South Wales are demanding the state Department of Education overhaul its social media policies after a demonstration showed how easily student photos could be mass-harvested using artificial intelligence. The catalyst was a $20 experiment by Central Coast parent and digital marketing specialist Ben Fitzpatrick, who used an AI tool to identify the Facebook pages of 1,780 NSW public schools. He stopped short of downloading children's photos, but the exercise demonstrated that the images schools post publicly can be located, aggregated, and potentially exploited at trivial cost and scale. The finding has intensified a long-simmering debate about whether schools should be using public social media platforms to share images of minors.

“

The catalyst was a $20 experiment by Central Coast parent and digital marketing specialist Ben Fitzpatrick, who used an AI tool to identify the Facebook pages of 1,780 NSW public schools.

The scale of exposure is significant. Fitzpatrick's audit found that 82 per cent of all NSW public schools operate an active Facebook page, many of which share images of students. The practice is also described as common among private schools, meaning the issue cuts across school sectors. For parents, this is not a theoretical concern. Reportedly, images taken from official school social media feeds are increasingly being scraped and run through generative AI tools to produce sexualised, mocking, or otherwise damaging depictions of children. The eSafety Commissioner has taken the threat seriously enough to urge schools to reconsider their posting habits and to establish action plans for responding when images are weaponised. That regulatory warning elevates the story beyond a local parent complaint and into a systemic child-safety challenge.

The Department of Education's response has been measured, acknowledging that social media is an important tool for schools across all sectors to connect with families and local communities, while insisting it has advised schools to take a risk-based approach to using images of students and staff. A spokesperson said the issue affects all schools and organisations that work with young people, and that the department continually reviews its guidance in line with emerging evidence and the changing digital landscape, including the risks posed by AI-generated material. Yet for critics, this guidance is precisely the problem: a risk-based approach without enforceable limits still permits hundreds of schools to post student images publicly, leaving children exposed to a threat the department itself acknowledges.

The implications extend beyond New South Wales. School systems in other Australian states and internationally face the same tension between community engagement and child privacy. The low financial and technical barrier to image scraping shown by Fitzpatrick's audit undermines the assumption that school Facebook pages are low-risk because they are local or obscure. Once posted, images can be harvested into datasets, manipulated with generative AI, and circulated in ways that are nearly impossible to trace or remove. The eSafety Commissioner's call for action plans suggests that schools will need to move from reactive content moderation toward proactive image governance, including stricter consent workflows, limits on what images are posted, and contracts with platform providers that recognise child-safety obligations.